Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: ox+kytgX4b2FXFTm1o78Si1qd1VqAnFG8A9E7YvEN3I=
Subject key identifier: 80:04:D9:73:94:56:C8:53:F4:D2:AD:3A:D8:3D:DD:13:5B:6F:E6:21
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019D28841B16DC5A2A5F80B74A2F97277EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0EA3
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: pcCJjdQXi7xfdCba21j2NH3xu1Y.roa (hash: NOqBLfQG0mcgz0tuCwwojXFzz2Q4UDo87fBXDInfSTU=)
2: sCJxKM5JVsRAzO-99cuhJnlis-M.roa (hash: GbbbYVn9hdqho7aCoddaLij3Hl3ONgVgTqQXELautrU=)
3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: rECq6lVoOWZx3nEhoq/1iWjvXfmLGLcASnC9NVYDA7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1b:16:dc:5a:2a:5f:80:b7:4a:2f:97:27:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=8004d9739456c853f4d2ad3ad83ddd135b6fe621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:34:6d:68:8b:0d:71:82:be:8e:24:a1:dd:
16:01:73:2d:0e:43:16:a3:13:37:ac:7b:a6:c2:c9:
56:8e:b0:de:74:9b:c9:44:34:e1:c0:fa:3e:d3:49:
cc:33:66:51:c7:3b:9a:2a:05:9e:bc:53:21:10:b1:
d1:7a:99:47:bc:15:69:57:71:dd:38:da:ff:eb:da:
d0:db:00:11:87:47:21:c0:d5:2a:d2:83:7c:b5:40:
a5:12:7f:88:56:66:14:28:6f:2e:23:07:c5:93:99:
88:84:ca:31:6d:0d:53:76:24:cc:c5:2e:fc:b3:80:
02:27:72:d7:8b:2e:f2:f7:34:92:00:c2:e2:69:83:
2d:0a:d4:05:c3:1a:87:db:01:de:9b:7f:ff:03:24:
ae:38:a1:08:eb:69:5f:3f:6b:11:5b:93:87:fb:fd:
49:a5:c7:55:ee:d1:0e:44:93:36:55:ef:b3:4f:81:
87:15:96:ba:6c:59:d5:18:a5:49:da:4e:f5:90:46:
ee:c7:97:a6:d3:11:d8:63:8e:08:a8:fa:57:84:82:
80:8d:b5:11:08:12:f0:ba:f5:0d:ba:58:d5:82:28:
79:0d:8d:8d:25:c4:6d:75:dd:47:b8:44:96:dd:df:
ae:1d:ac:19:c8:b0:53:02:6b:c6:5e:0e:f2:3f:1f:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:04:D9:73:94:56:C8:53:F4:D2:AD:3A:D8:3D:DD:13:5B:6F:E6:21
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0a:94:2a:85:0e:b5:8d:49:63:eb:66:a1:4f:d8:80:e0:14:
01:db:60:99:91:d9:71:ae:f1:87:f6:13:6a:b6:39:9c:79:27:
89:08:b3:60:f9:70:6c:a7:89:50:48:55:4c:b1:c3:0a:04:59:
9a:24:0f:c8:0d:a5:17:32:ed:30:7b:21:c1:f2:cc:90:84:ca:
d1:b8:4b:aa:ab:b1:d1:3f:78:f7:86:b6:39:3c:8a:c4:bd:6d:
cf:14:e5:f9:ac:24:f3:78:65:cb:d7:14:d3:26:8c:96:71:6c:
e0:07:19:95:0b:2f:bc:6d:e2:4b:2c:e9:47:ac:6d:4b:b3:52:
fd:3d:37:68:89:8f:d7:91:8f:94:30:82:eb:4c:d5:86:ab:04:
3b:bc:79:b1:2e:8e:22:2c:b3:cc:a0:2b:6d:ac:6d:d2:e8:6f:
4d:66:24:e7:ac:2a:a3:34:9e:bf:ae:ee:45:91:7b:99:a4:6d:
06:fb:db:c0:2e:67:b6:82:d3:c4:55:77:73:ba:29:a5:5f:23:
db:5a:27:8e:05:af:fb:fe:4a:ec:60:82:5f:bd:30:c7:d6:bb:
41:6a:3d:bb:c8:21:e9:3b:09:46:ce:81:c9:11:64:b3:cc:d6:
20:cb:41:bf:60:2e:b3:ca:fb:2c:d7:48:76:b3:db:45:cd:dc:
db:80:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:20 2026 by rpki-client